mirror of
https://github.com/bjc/prosody.git
synced 2025-04-03 21:27:38 +03:00
Previously, if surrounding code was not configuring the TLS context used default in net.http, it would not validate certificates at all. This is not a security issue with prosody, because prosody updates the context with `verify = "peer"` as well as paths to CA certificates in util.startup.init_http_client. Nevertheless... Let's not leave this pitfall out there in the open. |
||
---|---|---|
.. | ||
http | ||
resolvers | ||
websocket | ||
adns.lua | ||
connect.lua | ||
cqueues.lua | ||
dns.lua | ||
http.lua | ||
httpserver.lua | ||
server.lua | ||
server_epoll.lua | ||
server_event.lua | ||
server_select.lua | ||
unbound.lua | ||
websocket.lua |